Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.cer (raw, json)
Hash identifier: a3eodlymYfkRech03w4K2k6lMLnbqfQucOG4CpIdR2U=
Subject key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3A855C3D472DB1A8006A859B6C3AEEC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 01:13:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215665
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3a:85:5c:3d:47:2d:b1:a8:00:6a:85:9b:6c:3a:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 01:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:ff:07:86:c2:4d:89:e2:9a:ec:5f:61:aa:
a5:51:b8:d9:47:30:95:70:c3:ae:10:a3:ab:51:34:
90:16:2a:74:f9:be:b0:11:fa:18:65:98:0d:de:e7:
7f:68:a1:c7:3e:73:a5:8c:35:79:b7:83:1f:e7:ff:
d2:62:96:1f:e3:1e:37:56:6f:02:6e:9a:bf:6a:0d:
a2:53:29:ab:a2:cf:e6:75:f0:69:7f:e4:5d:b5:7d:
d6:e8:b8:85:1d:aa:5a:f2:7b:d4:22:12:85:12:31:
bd:f5:ed:f3:75:68:ba:30:99:cb:2c:68:dd:af:2d:
22:d4:59:36:75:3b:09:42:5c:a2:94:72:02:b4:3d:
da:fb:58:38:16:a1:fa:4a:19:b2:9d:89:b7:db:ad:
1d:59:a9:31:46:47:75:4d:06:0d:7b:5f:fd:bb:35:
ae:49:de:b7:75:93:32:54:5e:ed:e3:7e:31:70:d9:
65:f5:53:ce:0a:db:3b:f0:11:e3:0a:54:8d:bc:2a:
40:c7:34:52:56:5f:c1:6c:f0:0c:23:ca:59:7b:28:
18:b0:6d:95:88:4b:12:59:12:98:fe:5f:ee:e1:c7:
39:3b:6b:4c:d9:69:01:7f:e2:b2:f1:31:8a:07:0c:
e0:0d:2e:0a:75:39:e2:8f:ba:98:5d:83:02:2a:ed:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215665
Signature Algorithm: sha256WithRSAEncryption
ad:14:4f:4e:60:f9:58:9d:59:48:a8:6c:c2:5e:45:44:d5:b6:
04:22:e6:d0:94:25:c1:b4:20:69:66:cc:e2:ce:ec:be:43:71:
49:e4:86:6a:ad:a5:b0:23:38:ea:b1:c8:ff:9f:fc:ea:bc:63:
af:2c:17:0c:49:40:f4:e3:92:f7:76:6f:8a:70:43:ff:b8:f5:
c8:e1:e9:b8:71:05:74:dd:41:7a:19:20:47:be:04:33:c7:57:
51:8e:4a:6f:80:d8:7a:bb:29:4f:38:2b:8b:4f:e8:f2:a6:34:
36:b6:46:12:1a:b9:a9:1e:d5:f4:86:99:26:f9:5f:40:3c:a3:
8e:85:52:45:59:2d:34:ba:74:74:58:bf:8e:cb:68:f8:bd:7a:
9c:ab:53:51:71:c1:7a:55:f8:55:b9:af:d5:86:2b:25:f9:60:
7b:a2:ef:e1:76:b6:49:51:e0:ad:aa:72:cd:ca:88:99:f4:9f:
ae:45:d4:ce:7d:c5:3b:67:32:a0:3b:d7:b8:50:f6:d6:1b:78:
17:53:a8:c4:26:c3:77:6a:96:22:17:11:58:ca:ec:75:40:b3:
c2:ae:a2:ae:fa:c1:25:35:05:80:6a:20:32:13:3c:31:69:b7:
6a:61:ff:c5:5c:df:4d:d3:00:8d:b9:77:2b:41:d2:1f:be:79:
6b:22:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:27 2024 by rpki-client on console-ams.rpki-client.org